EIP-2026-113986

This exploit demonstrates a SQL injection vulnerability in the Product Catalog 8 WordPress plugin version 1.2. The vulnerability arises from unsanitized user input in the 'selectedCategory' POST parameter, allowing arbitrary SQL queries to be executed.